1 files changed, 41 insertions, 0 deletions
diff --git a/js/src/tests/test262/built-ins/ArrayBuffer/prototype/slice/species-is-not-constructor.js b/js/src/tests/test262/built-ins/ArrayBuffer/prototype/slice/species-is-not-constructor.js
new file mode 100644
index 0000000000..d8ff5ae6ab
--- /dev/null
+++ b/js/src/tests/test262/built-ins/ArrayBuffer/prototype/slice/species-is-not-constructor.js
@@ -0,0 +1,41 @@
+// Copyright (C) 2015 André Bargull. All rights reserved.
+// This code is governed by the BSD license found in the LICENSE file.
+
+/*---
+esid: sec-arraybuffer.prototype.slice
+description: >
+  Throws a TypeError if species constructor is not a constructor function.
+info: |
+  ArrayBuffer.prototype.slice ( start, end )
+
+  ...
+  13. Let ctor be SpeciesConstructor(O, %ArrayBuffer%).
+  14. ReturnIfAbrupt(ctor).
+  ...
+
+  7.3.20 SpeciesConstructor ( O, defaultConstructor )
+    ...
+    6. Let S be Get(C, @@species).
+    7. ReturnIfAbrupt(S).
+    ...
+    9. If IsConstructor(S) is true, return S.
+    10. Throw a TypeError exception.
+features: [Symbol.species]
+---*/
+
+var speciesConstructor = {};
+
+var arrayBuffer = new ArrayBuffer(8);
+arrayBuffer.constructor = speciesConstructor;
+
+function callSlice() {
+  arrayBuffer.slice();
+}
+
+speciesConstructor[Symbol.species] = {};
+assert.throws(TypeError, callSlice, "`constructor[Symbol.species]` value is Object");
+
+speciesConstructor[Symbol.species] = Function.prototype;
+assert.throws(TypeError, callSlice, "`constructor[Symbol.species]` value is Function.prototype");
+
+reportCompare(0, 0);